General
-
Target
0873e710b263d979389b58b5beb6b16ad2653a2f31dcd9a36657f3c56f9e4201
-
Size
216KB
-
Sample
220212-l1hvwsahe2
-
MD5
45c2ea647ec7363c4b94b33080719eb7
-
SHA1
5b74a1e0a4e76d4ac445c23511430670554f3c00
-
SHA256
0873e710b263d979389b58b5beb6b16ad2653a2f31dcd9a36657f3c56f9e4201
-
SHA512
99f373b1f50f838f8dcda1f606b56af45f4ae0ad49b787ca0b0a791ca2c64d822b38d64aa71fe939d1974c58f5ef411868ace3e61de354d9ca731da121af25dc
Static task
static1
Behavioral task
behavioral1
Sample
0873e710b263d979389b58b5beb6b16ad2653a2f31dcd9a36657f3c56f9e4201.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0873e710b263d979389b58b5beb6b16ad2653a2f31dcd9a36657f3c56f9e4201.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0873e710b263d979389b58b5beb6b16ad2653a2f31dcd9a36657f3c56f9e4201
-
Size
216KB
-
MD5
45c2ea647ec7363c4b94b33080719eb7
-
SHA1
5b74a1e0a4e76d4ac445c23511430670554f3c00
-
SHA256
0873e710b263d979389b58b5beb6b16ad2653a2f31dcd9a36657f3c56f9e4201
-
SHA512
99f373b1f50f838f8dcda1f606b56af45f4ae0ad49b787ca0b0a791ca2c64d822b38d64aa71fe939d1974c58f5ef411868ace3e61de354d9ca731da121af25dc
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-